Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/9c9143a9-8584-36e5-917c-e54595db3408.roa
File:                     9c9143a9-8584-36e5-917c-e54595db3408.roa (raw, json)
Hash identifier:          Mtok2FRasiVF/jft2B/eTZzmEg1nDI/4waW2x8MsYms=
Subject key identifier:   8D:D1:02:A3:8A:92:26:51:B9:35:79:B6:A2:0F:44:DC:41:28:AE:F5
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584ED9C751CD8EE5FB8ABBA69000
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/9c9143a9-8584-36e5-917c-e54595db3408.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     12129
IP address blocks:        65.183.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:51:cd:8e:e5:fb:8a:bb:a6:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=cad45fa1-5783-4292-9258-9fb8ecb4392e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:8b:b3:9b:6e:10:48:c2:a6:03:7b:f0:b4:
                    c4:00:77:b8:85:fa:d7:f7:03:54:85:6e:0e:cc:34:
                    66:96:40:59:83:04:a9:dc:60:f7:0e:ca:43:ac:87:
                    9d:cd:df:0c:8e:eb:be:9e:a0:ee:3d:4f:37:c7:a5:
                    05:4a:9e:49:41:4c:3a:92:6e:cc:de:9e:89:c9:4a:
                    0f:27:b9:e7:50:14:7c:aa:6a:f2:61:d2:89:99:cc:
                    f4:96:32:c1:4c:52:26:e9:77:28:1e:dc:55:d1:eb:
                    47:50:42:eb:74:53:0c:fb:91:74:68:36:40:49:c1:
                    cb:f7:c8:cb:71:59:b0:a7:e2:23:26:40:ec:6b:b5:
                    33:3e:74:fb:f1:58:8d:e8:26:c5:41:85:8e:c1:55:
                    45:0e:3a:66:6f:46:14:e3:e9:03:23:8a:5a:bd:3c:
                    ac:4b:6c:5e:88:4f:cd:d5:7c:14:70:37:d3:55:78:
                    2c:08:58:23:7d:4b:c7:91:53:57:a1:9b:99:b8:d0:
                    40:0b:32:bb:8b:fa:84:e5:7a:c6:ae:1e:f0:04:d7:
                    cc:17:74:55:a4:b2:89:81:ab:e6:6a:26:06:f9:27:
                    4d:3b:3e:ce:9e:42:6e:44:f7:00:1f:ad:01:ad:f5:
                    d8:ec:49:f7:0d:2f:f6:1f:77:40:3a:0f:c4:b8:88:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D1:02:A3:8A:92:26:51:B9:35:79:B6:A2:0F:44:DC:41:28:AE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/9c9143a9-8584-36e5-917c-e54595db3408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:f2:65:a8:07:08:a5:64:b1:44:9a:b5:8d:f0:cf:4b:87:
         41:fb:8c:e3:0a:4e:21:1d:e9:5b:81:d8:8f:af:ee:de:b6:fd:
         ef:9c:b8:5c:4a:a1:73:c4:ce:98:01:e2:90:1d:37:80:9c:14:
         34:6e:e9:15:ca:25:10:d0:01:03:88:28:3e:d7:13:bd:ed:c8:
         2e:f6:c2:18:f7:3f:e5:3e:56:17:1f:59:bf:ec:99:5e:bd:a5:
         6c:11:b6:ea:b6:d8:05:17:b6:cb:e9:a2:73:4d:10:2b:25:8d:
         65:94:2d:6e:9e:24:e5:f4:6c:d0:30:30:6c:1c:1c:9e:d2:63:
         8a:58:69:ca:85:04:85:ed:0e:d0:bd:10:d3:61:a3:76:3a:91:
         31:7d:32:0a:d4:1c:3e:77:a4:b7:b9:b0:6b:3f:60:67:0e:d0:
         db:9f:95:76:d4:bd:b6:68:db:b5:d0:41:3e:fd:78:de:b1:54:
         95:2c:40:16:be:b8:9c:1f:23:5f:4f:b6:1b:c4:cb:75:09:19:
         e0:94:1c:e8:df:21:1e:e8:a8:16:99:2c:3c:95:27:e5:61:63:
         e0:a4:81:5e:d5:5d:c8:3e:cd:37:56:95:d3:7e:e5:86:e7:aa:
         88:54:03:77:21:d8:e8:09:e6:27:4d:cb:7a:1f:29:47:ab:dd:
         68:2f:7e:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1HNjuX7irumkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
Y2FkNDVmYTEtNTc4My00MjkyLTkyNTgtOWZiOGVjYjQzOTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaLs5tuEEjCpgN78LTEAHe4hfrX9wNUhW4O
zDRmlkBZgwSp3GD3DspDrIedzd8Mjuu+nqDuPU83x6UFSp5JQUw6km7M3p6JyUoP
J7nnUBR8qmryYdKJmcz0ljLBTFIm6XcoHtxV0etHUELrdFMM+5F0aDZAScHL98jL
cVmwp+IjJkDsa7UzPnT78ViN6CbFQYWOwVVFDjpmb0YU4+kDI4pavTysS2xeiE/N
1XwUcDfTVXgsCFgjfUvHkVNXoZuZuNBACzK7i/qE5XrGrh7wBNfMF3RVpLKJgavm
aiYG+SdNOz7OnkJuRPcAH60BrfXY7En3DS/2H3dAOg/EuIjhbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3RAqOKkiZRuTV5tqIPRNxBKK71MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOWM5MTQzYTktODU4NC0z
NmU1LTkxN2MtZTU0NTk1ZGIzNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQbegMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFc8mWoBwilZLFEmrWN8M9Lh0H7jOMKTiEd6VuB2I+v7t62/e+cuFxK
oXPEzpgB4pAdN4CcFDRu6RXKJRDQAQOIKD7XE73tyC72whj3P+U+VhcfWb/smV69
pWwRtuq22AUXtsvponNNECsljWWULW6eJOX0bNAwMGwcHJ7SY4pYacqFBIXtDtC9
ENNho3Y6kTF9MgrUHD53pLe5sGs/YGcO0NuflXbUvbZo27XQQT79eN6xVJUsQBa+
uJwfI19PthvEy3UJGeCUHOjfIR7oqBaZLDyVJ+VhY+CkgV7VXcg+zTdWldN+5Ybn
qohUA3ch2OgJ5idNy3ofKUer3Wgvfv8=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:43 2026 by rpki-client